If a debit card charge looks wrong, contact the bank or other financial institution that holds your account as soon as possible. For a covered electronic fund transfer from a U.S. consumer account, the institution generally must receive your notice within 60 days after it sends the periodic statement that first shows the error.
That 60-day period is the main Regulation E deadline. It protects access to the federal error-resolution process; it doesn't guarantee that the bank will decide in your favor. Visa and Mastercard may also have network dispute windows, sometimes 120 days for particular dispute categories, but those windows don't replace the Regulation E deadline.
This information is for U.S. consumer accounts. Business accounts, foreign banks, prepaid products, payment apps, and transactions outside the United States can follow different rules.
Debit card dispute deadlines at a glance
| Situation | Main time limit | What the deadline affects |
|---|---|---|
| Unauthorized electronic fund transfer or another covered Regulation E error | 60 days after the statement is sent | Preserves the Regulation E error-resolution process |
| Lost or stolen card or access device | Report within 2 business days after learning of the loss or theft | Generally limits liability for earlier unauthorized transfers to $50 |
| Bank's initial investigation | 10 business days in most cases | The bank investigates and decides whether an error occurred |
| Extended Regulation E investigation | Up to 45 days generally, or up to 90 days in certain cases | Provisional credit is usually required under specific conditions |
| Visa or Mastercard network dispute | Often a category-specific 120-day window | A network chargeback process, not a universal legal right |
| Fair Credit Billing Act dispute | 60 days, with written-notice requirements | Credit cards, not ordinary debit card accounts |
The practical rule is simple: report the problem when you see it. You can sort out later whether it is a Regulation E error, a network dispute, a merchant problem, or something else.
First determine what went wrong
The description of the problem matters. A charge you didn't authorize is different from a purchase you authorized but never received.
| Problem | Likely route | Important distinction |
|---|---|---|
| Someone used your card or account without permission | Regulation E and possibly a network fraud dispute | Tell the bank you are reporting an unauthorized electronic fund transfer |
| The bank processed the wrong amount, duplicated a transfer, or made another processing error | Regulation E may apply | Explain exactly what the bank got wrong |
| You authorized the purchase but the goods were not delivered, were defective, or a promised refund never arrived | Merchant resolution and possibly the bank's network dispute process | This isn't automatically an unauthorized-transfer claim under Regulation E |
| A recurring debit continues after you canceled it | Merchant cancellation plus possible bank action | A stop-payment request may address a future transfer but doesn't necessarily end the underlying contract |
An unfamiliar merchant name isn't proof of fraud. The statement descriptor may identify a parent company, payment processor, or different business name. Check your receipts and account history quickly, but don't spend time investigating if the transaction still appears suspicious.
The FTC's sample letter for disputing credit and debit card charges recommends calling promptly, following up in writing, describing the error, and keeping your original documents.
How the 60-day Regulation E deadline works
Regulation E appears in 12 C.F.R. part 1005. The error-resolution rule at 12 C.F.R. Section 1005.11 generally requires the institution to receive your notice no later than 60 days after it sends the statement on which the alleged error first appears.
Keep these points in mind:
- The main clock generally runs from the statement showing the error, not from the purchase or posting date.
- Use the first periodic statement that shows the transaction or other error.
- If you aren't sure when the statement was sent, ask the bank and save its answer.
- A phone call may count as notice, but the bank can require written confirmation within 10 business days.
- If the bank gives you a written-confirmation deadline, meet it even if you already reported the problem by phone.
- Near the deadline, use the bank's required channel and save the case number, secure-message receipt, upload confirmation, or delivery record.
The 60-day period doesn't promise a refund. It preserves the bank's regulatory investigation process. The bank can still conclude that the transaction was authorized or that the claimed error did not occur.
The separate two-business-day rule for a lost or stolen card
Report a lost or stolen debit card or other access device within two business days after learning about the loss. Under the general Regulation E liability framework, that usually limits your liability for unauthorized transfers made before notice to $50.
If you miss the two-business-day window but notify the bank within the 60-day statement period, potential liability can rise to as much as $500. The calculation can include unauthorized transfers made after the first two business days and before notice, subject to the conditions in Regulation E. If you also miss the 60-day period, you may risk liability for additional transfers made after that period and before you notify the bank.
This is a potential-liability rule, not permission to wait. Your bank or card network may offer more generous protection under its account terms, but prompt notice remains the safest choice.
What happens after you report the error
Once the bank has a valid notice, Regulation E sets investigation and crediting deadlines when the rule applies.
- Initial investigation: The bank generally has 10 business days to investigate and determine whether an error occurred. A new account can have a 20-business-day initial period.
- Correction: If the bank finds an error, it generally must correct it, including related fees or interest where applicable, within one business day after making that determination.
- More time: If the bank can't finish within the initial period, it can generally take up to 45 days if it provisionally credits the disputed amount within 10 business days and makes the funds available for your use.
- Special 90-day period: The bank may have up to 90 days for certain point-of-sale debit card transactions, foreign-initiated electronic transfers, or errors involving a new account. In those cases, provisional credit generally must be provided within 20 business days.
- Results: After completing the investigation, the bank generally must report its results within three business days.
- Supporting documents: If the bank says no error occurred, ask for the written explanation and the documents it relied on.
- Reversal: Provisional credit isn't necessarily final. If the bank determines that no error occurred, it may reverse the credit, but it generally must give at least five business days' notice of the date and amount of the debit.
The often-quoted 72-hour provisional-credit figure is not a universal Regulation E requirement. A bank may credit funds sooner under its own procedures, but federal law does not create a general three-day guarantee.
Regulation E also doesn't create a universal 30-day acknowledgment deadline for debit disputes. An acknowledgment email or case update may be part of your bank's process, but it isn't the same as the investigation deadlines above.
Why the 120-day Visa or Mastercard window can mislead
You may hear that Visa and Mastercard give cardholders 120 days to dispute a debit transaction. Treat that number as a possible network operating window, not as one U.S. consumer deadline.
The applicable network period can depend on:
- The dispute category or reason code
- The transaction or processing date
- The expected delivery date
- The date a refund or credit was promised
- Whether the issue involves fraud, duplication, cancellation, non-delivery, or another category
- The time the issuer needs to submit the dispute
Some categories use shorter periods, and other categories use a different starting event. Your bank or card issuer submits the network dispute; you normally don't file directly with Visa or Mastercard.
A network window therefore does not:
- Extend Regulation E's 60-day notice period
- Guarantee a refund
- Require the bank to accept a late claim
- Turn an authorized purchase disagreement into an unauthorized transfer
- Make the Fair Credit Billing Act apply to a debit card
If 60 days is approaching, tell the bank that you want the transaction reviewed under any applicable Regulation E and network rules. Ask for the bank's consumer notice deadline and dispute procedure instead of relying on a general 120-day figure found online.
Debit cards generally aren't covered by the Fair Credit Billing Act
The Fair Credit Billing Act, or FCBA, generally applies to open-end credit accounts such as credit cards. It is not the standard federal billing-dispute rule for a debit card that draws money from a deposit account.
A Visa or Mastercard logo doesn't determine whether the account is a credit account. A debit card with one of those logos is still generally governed by debit-account rules, including Regulation E where applicable.
Credit card billing-error procedures can have their own written-notice and billing-address requirements. Don't copy those procedures onto a debit dispute. Follow the instructions from the bank or financial institution that holds your account.
How to dispute a debit card charge
1. Save the transaction details
Record the amount, transaction date, posting date, merchant descriptor, and the date of the statement that first showed the charge. Download the statement or take a screenshot, but keep the full statement as well.
2. Secure the account
If the card or account may be compromised, use the bank's card-lock feature if available, call its fraud number, and ask whether you need a replacement card or new PIN. Change your online banking credentials if login information may have been exposed.
Report every unauthorized transaction you see. Reporting one charge doesn't necessarily report later transfers.
3. Contact the bank through an approved channel
Call the number on the back of the card or use the bank's secure dispute process. Use a description that matches the facts:
- "I am reporting an unauthorized electronic fund transfer."
- "The amount processed was incorrect."
- "This transaction was duplicated."
- "I authorized the purchase, but I want to ask about the bank's dispute process because the goods were not delivered."
Ask for the case number, the date the bank received your notice, and the deadline for any written confirmation.
If you authorized the purchase but have a delivery, cancellation, or refund problem, describe that issue rather than calling it fraud. You can contact the merchant too, but don't wait for the seller before notifying the bank when a deadline may be running.
4. Follow up in writing
Use the bank's secure-message system, claim form, or the address it provides. Include:
- Your name and the last four digits of the account or card
- The transaction date and amount
- The merchant name as it appears on the statement
- A short, factual explanation
- The date you first noticed the issue
- Copies of supporting documents
Don't send your full account number through ordinary email. Keep copies of everything you send, along with delivery and upload confirmations.
A short notice might say:
I am reporting an error on my debit account. The transaction for [$amount] at [merchant] posted on [date]. I [did not authorize it / believe the amount is incorrect because ____]. Please investigate under applicable electronic-fund-transfer rules, tell me whether written confirmation is required, and provide my claim number.
5. Match the evidence to the dispute
Useful records can include:
- The statement showing the charge
- Transaction details from online banking
- Receipts and order confirmations
- Cancellation notices and messages with the merchant
- Return tracking or proof of delivery
- A timeline showing when you noticed and reported the issue
- Information showing when a card or phone was lost or stolen
Send copies and keep the originals. A police report may help in some fraud situations, but ask the bank whether it requires one rather than assuming that it does.
6. Track the investigation
Watch for provisional credit, requests for more information, the investigation result, and any reversal notice. Keep enough money in the account to handle a possible reversal of temporary credit.
If the bank denies the claim, ask whether the reason was late notice, a finding that the transaction was authorized, missing information, or a network-rule decision. Those are different problems and may require different follow-up.
What to do if you missed the deadline
Report the transaction anyway. The bank may still review it under an internal policy or network process, and the merchant may still agree to a refund. There is no guarantee, but doing nothing removes those possible options.
Explain why the notice was late. For example, tell the bank if:
- The statement was not sent or wasn't available
- The charge appeared only on a later statement
- You couldn't access the account
- A bank employee gave you incorrect instructions
- Circumstances prevented you from giving timely notice
Ask the bank to review the claim under its account terms and any available network process. Request a written decision and the documents relied on. If you reported the error on time but the bank mishandled the investigation, keep proof of your original notice and every follow-up.
You can also submit a complaint through the CFPB complaint portal. A complaint may prompt a response from the company, but it doesn't automatically require a refund or pause another legal deadline. For a large loss or a disputed bank error, consider speaking with a consumer-law attorney or legal-aid organization promptly.
Mistakes that can weaken a dispute
- Counting 60 days from the purchase instead of from the statement that first showed the error
- Treating a Visa or Mastercard logo as proof that the account is a credit card
- Relying on the 120-day network figure as a federal guarantee
- Calling an authorized merchant disagreement "fraud"
- Waiting for the seller before notifying the bank
- Assuming provisional credit means the claim is final
- Failing to save the case number and written follow-up
- Sending original receipts or sensitive account information through an unsecured channel
Questions people ask
Can I dispute a debit card charge after 60 days?
You can still report it immediately and ask the bank to review it. The bank may consider its internal process, a network dispute, or a merchant refund, but you may no longer have the same Regulation E protections. Explain the reason for the delay and provide proof.
Does the 120-day Visa or Mastercard period override the 60-day Regulation E rule?
No. A network period is separate from the federal notice period. It may provide a chargeback path in some situations, but it doesn't extend the Regulation E deadline or guarantee that the issuer will submit the claim.
Does the Regulation E deadline start on the transaction date?
Usually not. For the main Regulation E error-resolution deadline, it generally starts when the bank sends the periodic statement that first shows the error. Other deadlines, including network windows and the two-business-day lost-card rule, use different triggers.
How long can a debit dispute investigation take?
The bank generally has 10 business days for its initial investigation. If it needs more time, the ordinary maximum is generally 45 days with required provisional credit. Certain point-of-sale, foreign-initiated, and new-account cases can take up to 90 days under the rule.
Can I dispute a purchase I authorized?
You can ask the merchant and bank about a refund or network dispute for non-delivery, a defective item, a canceled order, or a promised refund that never arrived. Those facts aren't automatically an unauthorized electronic fund transfer under Regulation E, so keep the receipts, merchant messages, and return records.